EP4236240A3 - Netzwerkanomaliedetektion - Google Patents

Netzwerkanomaliedetektion Download PDF

Info

Publication number
EP4236240A3
EP4236240A3 EP23180415.4A EP23180415A EP4236240A3 EP 4236240 A3 EP4236240 A3 EP 4236240A3 EP 23180415 A EP23180415 A EP 23180415A EP 4236240 A3 EP4236240 A3 EP 4236240A3
Authority
EP
European Patent Office
Prior art keywords
network
features
control message
anomaly detection
label
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP23180415.4A
Other languages
English (en)
French (fr)
Other versions
EP4236240A2 (de
Inventor
designation of the inventor has not yet been filed The
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Google LLC
Original Assignee
Google LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Google LLC filed Critical Google LLC
Publication of EP4236240A2 publication Critical patent/EP4236240A2/de
Publication of EP4236240A3 publication Critical patent/EP4236240A3/de
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/02Capturing of monitoring data
    • H04L43/028Capturing of monitoring data by filtering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0823Errors, e.g. transmission errors
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N3/00Computing arrangements based on biological models
    • G06N3/02Neural networks
    • G06N3/04Architecture, e.g. interconnection topology
    • G06N3/044Recurrent networks, e.g. Hopfield networks
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N3/00Computing arrangements based on biological models
    • G06N3/02Neural networks
    • G06N3/04Architecture, e.g. interconnection topology
    • G06N3/044Recurrent networks, e.g. Hopfield networks
    • G06N3/0442Recurrent networks, e.g. Hopfield networks characterised by memory or gating, e.g. long short-term memory [LSTM] or gated recurrent units [GRU]
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N3/00Computing arrangements based on biological models
    • G06N3/02Neural networks
    • G06N3/04Architecture, e.g. interconnection topology
    • G06N3/045Combinations of networks
    • G06N3/0455Auto-encoder networks; Encoder-decoder networks
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N3/00Computing arrangements based on biological models
    • G06N3/02Neural networks
    • G06N3/08Learning methods
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N3/00Computing arrangements based on biological models
    • G06N3/02Neural networks
    • G06N3/08Learning methods
    • G06N3/09Supervised learning
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0677Localisation of faults
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • H04L41/145Network analysis or design involving simulating, designing, planning or modelling of a network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud
    • H04W12/121Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W24/00Supervisory, monitoring or testing arrangements
    • H04W24/04Arrangements for maintaining operational condition
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W24/00Supervisory, monitoring or testing arrangements
    • H04W24/08Testing, supervising or monitoring using real traffic
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • H04L41/149Network analysis or design for prediction of maintenance
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/16Threshold monitoring
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W84/00Network topologies
    • H04W84/02Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/04Large scale networks; Deep hierarchical networks
    • H04W84/042Public Land Mobile systems, e.g. cellular systems

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Artificial Intelligence (AREA)
  • Evolutionary Computation (AREA)
  • Biophysics (AREA)
  • Molecular Biology (AREA)
  • Biomedical Technology (AREA)
  • Computational Linguistics (AREA)
  • General Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Mathematical Physics (AREA)
  • General Health & Medical Sciences (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Environmental & Geological Engineering (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)
EP23180415.4A 2019-04-29 2019-11-22 Netzwerkanomaliedetektion Pending EP4236240A3 (de)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US16/397,082 US10891546B2 (en) 2019-04-29 2019-04-29 Network anomaly detection
PCT/US2019/062763 WO2020222872A1 (en) 2019-04-29 2019-11-22 Network anomaly detection
EP19820965.2A EP3954099B1 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion

Related Parent Applications (2)

Application Number Title Priority Date Filing Date
EP19820965.2A Division EP3954099B1 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion
EP19820965.2A Division-Into EP3954099B1 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion

Publications (2)

Publication Number Publication Date
EP4236240A2 EP4236240A2 (de) 2023-08-30
EP4236240A3 true EP4236240A3 (de) 2023-10-04

Family

ID=68887153

Family Applications (2)

Application Number Title Priority Date Filing Date
EP23180415.4A Pending EP4236240A3 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion
EP19820965.2A Active EP3954099B1 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion

Family Applications After (1)

Application Number Title Priority Date Filing Date
EP19820965.2A Active EP3954099B1 (de) 2019-04-29 2019-11-22 Netzwerkanomaliedetektion

Country Status (6)

Country Link
US (4) US10891546B2 (de)
EP (2) EP4236240A3 (de)
JP (1) JP7344314B2 (de)
KR (1) KR102626273B1 (de)
CN (2) CN116455787A (de)
WO (1) WO2020222872A1 (de)

Families Citing this family (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11044597B2 (en) 2018-08-07 2021-06-22 Charter Communications Operating, Llc Apparatus and methods for registration and operation in wireless networks
US10958585B2 (en) * 2018-12-31 2021-03-23 Juniper Networks, Inc. Methods and apparatus for facilitating fault detection and/or predictive fault detection
US11930484B2 (en) 2019-03-26 2024-03-12 Charter Communications Operating, Llc Methods and apparatus for system information management in a wireless system
US10891546B2 (en) 2019-04-29 2021-01-12 Google Llc Network anomaly detection
US12069077B2 (en) * 2019-07-26 2024-08-20 Sony Group Corporation Methods for detecting a cyberattack on an electronic device, method for obtaining a supervised random forest model for detecting a DDoS attack or a brute force attack, and electronic device configured to detect a cyberattack on itself
US11138059B2 (en) 2019-09-25 2021-10-05 Juniper Networks, Inc. Log analysis in vector space
WO2021137182A1 (en) * 2019-12-31 2021-07-08 Edgehawk Security Ltd. Techniques for disaggregated detection and mitigation of distributed denial-of-service attacks
US11412406B2 (en) 2020-02-13 2022-08-09 Charter Communications Operating, Llc Apparatus and methods for user device buffer management in wireless networks
US11564155B2 (en) * 2020-04-07 2023-01-24 Charter Communications Operating, Llc Apparatus and methods for interworking in wireless networks
US11057865B1 (en) 2020-05-20 2021-07-06 Charter Communications Operating, Llc Apparatus and methods for enhanced paging in wireless networks
JP7165830B2 (ja) * 2020-09-29 2022-11-04 楽天グループ株式会社 異常判定システム、異常判定方法及びプログラム
US11671446B2 (en) * 2020-12-11 2023-06-06 Google Llc Automatic detection and mitigation of denial-of-service attacks
US11765188B2 (en) * 2020-12-28 2023-09-19 Mellanox Technologies, Ltd. Real-time detection of network attacks
GB2610562A (en) * 2021-09-08 2023-03-15 British Telecomm Anomalous activity mitigation
US20230094656A1 (en) * 2021-09-29 2023-03-30 Amitav Mukherjee Cross-layer automated network vulnerability identification and localization
GB2616468B (en) * 2022-03-10 2024-07-24 British Telecomm Performance issue monitoring
JP2024004320A (ja) * 2022-06-28 2024-01-16 日本電気株式会社 学習データ抽出装置、推論装置および学習データ抽出方法
US20250063399A1 (en) * 2023-08-15 2025-02-20 Verizon Patent And Licensing Inc. Passive speed estimation for fixed and mobile devices
WO2025079120A1 (en) * 2023-10-12 2025-04-17 Jio Platforms Limited System and method for predicting one or more anomalies in a network
WO2025083731A1 (en) * 2023-10-20 2025-04-24 Jio Platforms Limited System and method for predicting one or more anomalies of at least one user equipment
KR20250158524A (ko) 2024-04-30 2025-11-06 고려대학교 산학협력단 프로그래밍 가능한 데이터 평면에서의 인-네트워크 추론 장치 및 방법

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160065444A1 (en) * 2014-08-26 2016-03-03 Arbor Networks, Inc. Anomaly detection based on combinations of cause value, message type, response time (gtp-c)

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6836536B2 (en) 2002-06-17 2004-12-28 Hobbes Huang Clamp device integrating test device for telephone and network cables
US8131107B2 (en) * 2008-05-12 2012-03-06 General Electric Company Method and system for identifying defects in NDT image data
WO2010011411A1 (en) * 2008-05-27 2010-01-28 The Trustees Of Columbia University In The City Of New York Systems, methods, and media for detecting network anomalies
JP2010056682A (ja) * 2008-08-26 2010-03-11 National Institute Of Information & Communication Technology 電子メール受信装置及び電子メール受信方法、電子メール送信装置及び電子メール送信方法、メール送信サーバ
WO2010076832A1 (en) 2008-12-31 2010-07-08 Telecom Italia S.P.A. Anomaly detection for packet-based networks
US8763127B2 (en) * 2009-03-13 2014-06-24 Rutgers, The State University Of New Jersey Systems and method for malware detection
US8836536B2 (en) 2011-07-29 2014-09-16 Hewlett-Packard Development Company, L. P. Device characterization system and methods
US9087303B2 (en) * 2012-02-19 2015-07-21 International Business Machines Corporation Classification reliability prediction
US9319911B2 (en) * 2013-08-30 2016-04-19 International Business Machines Corporation Adaptive monitoring for cellular networks
US9690933B1 (en) * 2014-12-22 2017-06-27 Fireeye, Inc. Framework for classifying an object as malicious with machine learning for deploying updated predictive models
US10083071B2 (en) * 2014-12-30 2018-09-25 Battelle Memorial Institute Temporal anomaly detection on automotive networks
US10713594B2 (en) * 2015-03-20 2020-07-14 Salesforce.Com, Inc. Systems, methods, and apparatuses for implementing machine learning model training and deployment with a rollback mechanism
KR101932874B1 (ko) * 2015-03-27 2018-12-27 텔레호낙티에볼라게트 엘엠 에릭슨(피유비엘) Ue의 네트워크에의 액세스를 핸들링하는 방법 및 노드
CN113315682B (zh) * 2015-07-22 2023-09-01 动态网络服务股份有限公司 生成信息传输性能警告的方法、系统和装置
US10220167B2 (en) * 2016-03-24 2019-03-05 Cisco Technology, Inc. Mechanisms to prevent anomaly detectors from learning anomalous patterns
US20170279685A1 (en) * 2016-03-25 2017-09-28 Cisco Technology, Inc. Adjusting anomaly detection operations based on network resources
EP3468469A4 (de) * 2016-06-13 2020-02-19 Xevo Inc. Verfahren und system zur bereitstellung des verhaltens eines fahrzeugführers mithilfe eines virtuous cycle
US10193915B2 (en) 2016-09-30 2019-01-29 Oath Inc. Computerized system and method for automatically determining malicious IP clusters using network activity data
CN109194616B (zh) * 2018-08-01 2020-03-10 北京科技大学 一种针对变频矢量控制装置的工业信息安全防护系统
CN108965340B (zh) * 2018-09-25 2020-05-05 网御安全技术(深圳)有限公司 一种工业控制系统入侵检测方法及系统
US10891546B2 (en) * 2019-04-29 2021-01-12 Google Llc Network anomaly detection

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160065444A1 (en) * 2014-08-26 2016-03-03 Arbor Networks, Inc. Anomaly detection based on combinations of cause value, message type, response time (gtp-c)

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
LOPEZ-MARTIN MANUEL ET AL: "Conditional Variational Autoencoder for Prediction and Feature Recovery Applied to Intrusion Detection in IoT", vol. 17, no. 9, 26 August 2017 (2017-08-26), pages 1967, XP093075277, Retrieved from the Internet <URL:https://www.mdpi.com/1424-8220/17/9/1967> DOI: 10.3390/s17091967 *

Also Published As

Publication number Publication date
CN116455787A (zh) 2023-07-18
EP3954099A1 (de) 2022-02-16
KR20220002602A (ko) 2022-01-06
CN113748656B (zh) 2023-04-21
US20240127055A1 (en) 2024-04-18
JP7344314B2 (ja) 2023-09-13
WO2020222872A1 (en) 2020-11-05
EP3954099B1 (de) 2024-01-10
US11861453B2 (en) 2024-01-02
EP4236240A2 (de) 2023-08-30
US20200342311A1 (en) 2020-10-29
US20230054625A1 (en) 2023-02-23
US20210133574A1 (en) 2021-05-06
KR102626273B1 (ko) 2024-01-17
US10891546B2 (en) 2021-01-12
CN113748656A (zh) 2021-12-03
JP2022530166A (ja) 2022-06-27
US11507837B2 (en) 2022-11-22
US12229677B2 (en) 2025-02-18

Similar Documents

Publication Publication Date Title
EP4236240A3 (de) Netzwerkanomaliedetektion
EP3379360A3 (de) Anomaliedetektionssystem und anomaliedetektionsverfahren
EP3557819A8 (de) Verfahren und system zur erkennung eines serverfehlers
EP4645014A3 (de) Verfahren, system und medium zur vorhersage von fertigungsprozessrisiken
EP4485250A3 (de) Maschinenlernverfahren und systeme zur bestimmung des dateirisikos unter verwendung von inhaltsentschärfungs- und rekonstruktionsanalyse
MX2021009726A (es) Metodos y sistemas para determinar un estado relacionado con el embarazo de un sujeto.
EP1717553A3 (de) Verfahren und Systeme zur Überwachung von Witterungsverhältnissen, Prognose von Turbulenzen und Optimierung der Flugwege eines Flugzeuges
ATE514994T1 (de) Verfahren und vorrichtung für die automatische sicherung digitaler daten eines speichers einer computerinstallation und von einem computer mit den entsprechenden befehlen im speicher lesbarer datenträger
SG11201908394WA (en) System, Method, And Computer Program For Analyzing Operation Of Fluid Control Device
EP3091410A3 (de) Verfahren und system zur datenanalyse
EP2461272A3 (de) Fahrunterstützungssystem und Fahrunterstützungsverfahren
EP1884872A3 (de) Verfahren und System zur Verwendung von Anwendungsentwicklungsdaten zum Instanziieren von Hilfsinformationen
MX2022005962A (es) Metodo para mostrar datos y dispositivo de computadora.
WO2022198212A3 (en) Fault detection and monitoring
EP2660753A3 (de) Verfahren und Vorrichtung zur Bildverarbeitung
ZA202210700B (en) Systems and methods for processing retinal signal data and identifying conditions
CN103455546B (zh) 用于为活动和行为建立简档的方法和系统
CN109758141B (zh) 一种心理压力监测方法、装置及系统
EP3772703A3 (de) Bildverarbeitungsvorrichtung und bildverarbeitungsverfahren
WO2021020866A9 (ko) 원격 모니터링을 위한 영상 분석 시스템 및 방법
WO2020239910A3 (en) An intelligent computer aided decision support system
WO2019152177A3 (en) System and method for neuromorphic visual activity classification based on foveated detection and contextual filtering
GB2624834A (en) Systems and methods to determine an activity associated with an object of interest
CN106429684B (zh) 一种电梯运行状态主动检验方法
Isaza et al. Situation prediction based on fuzzy clustering for industrial complex processes

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED

AC Divisional application: reference to earlier application

Ref document number: 3954099

Country of ref document: EP

Kind code of ref document: P

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: DE

Ref legal event code: R079

Free format text: PREVIOUS MAIN CLASS: H04L0041140000

Ipc: H04L0043028000

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

RIC1 Information provided on ipc code assigned before grant

Ipc: H04L 41/149 20220101ALN20230830BHEP

Ipc: H04L 43/16 20220101ALN20230830BHEP

Ipc: H04L 41/14 20220101ALI20230830BHEP

Ipc: H04L 9/40 20220101ALI20230830BHEP

Ipc: H04W 12/121 20210101ALI20230830BHEP

Ipc: H04L 43/028 20220101AFI20230830BHEP

RIN1 Information on inventor provided before grant (corrected)

Inventor name: SAYANA, KRISHNA

Inventor name: TERZIS, ANDREAS

Inventor name: KALAPATAPU, DUTT

Inventor name: THUKRAL, POOJITA

Inventor name: PEROULAS, JAMES

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20240404

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20250122